Re: Firewall

From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 05/26/04 

Date: Tue, 25 May 2004 23:27:54 GMT

If you are talking about W2K Server you can use rras and NAT and configure
input and output filters. For W2K Pro there is no firewall and you would end
up using ICS which acts as a basic NAT router. I suppose you could also try
configuring ipsec filtering on just the external adapter. You may be better
off with a lower end firewall device such as the Netgear ProSafe line
[starting less than $100] which is a true SPI firewall and has some
configuration to restrict outbound access though the number of rules to
create are rather limited. A lot will use linux for such a purpose. I am not
a big linux user, but it is pretty easy to install and configure these days
and the rules in the configuration file are pretty straight forward for the
firewall for iptables or ipchains. -- Steve

"Adam Thornton" <anonymous@discussions.microsoft.com> wrote in message
news:1231301c44272$87d8e4e0$a101280a@phx.gbl...
> Here's the deal. We are trying to implement a kind
> of "poor man's firewall." My question is how easy is it to
> place two NIC cards into a Windows 2000 machine (one card
> having access to the router/ISP, the other having access
> to a switch) to have a firewall for security purposes. We
> were wanting to test the security capabilities of Windows
> 2000 and its firewall. Is this possible? Are there any
> other cheaper alternatives? Is this even worthwhile?
> Thanks in advance for any help!

Relevant Pages

  • Re: High CPU util on 3825
    ... There are plenty of NAT and access lists available. ... Below is a stripped version of the configuration. ... ip inspect name firewall cuseeme timeout 3600 ... crypto pki certificate chain TP-self-signed-4150674149 ...
    (comp.dcom.sys.cisco)
  • Re: High CPU util on 3825
    ... There are plenty of NAT and access lists available. ... Below is a stripped version of the configuration. ... ip inspect name firewall cuseeme timeout 3600 ... crypto pki certificate chain TP-self-signed-4150674149 ...
    (comp.dcom.sys.cisco)
  • Re: home network behind NAT and firewall ?
    ... >> real Firewall appliance with more than 20 systems at any given time. ... >> firewall provides for the ability to assign both public (not nat) and ... that would reset the router and allow remote control - it was noted ... >> LAN inside their network and it would never have to reach the ISP's ...
    (comp.security.firewalls)
  • Re: NAT vs. True Firewalls
    ... not just mean packet filter. ... A firewall can be made up of one or more ... components that can block or filter protocol traffic between two networks. ... So a NAT can be as much part of a firewall implementation as the ...
    (comp.security.firewalls)
  • Re: 56k dial up on laptop 802.11G ?
    ... NAT is not FW software. ... > firewall is literally anything that defends your network against ... >>By comparing the way NAT functions between two networks, ... >>And I consider the FW appliance to out class the packet filtering NAT ...
    (alt.internet.wireless)